ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

CVE-2026-47117-openmed-rce

CVE-2026-47117: OpenMed Unauthenticated Remote Code Execution via PII Model Loading Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2024-32462

CVE-2024-32462 CVE-2024-32462 ejecución de código y escape de sandbox Cómo debería verse el directorio para compilar esto root@kitploit: ├── org.exploit.SandboxEscape.yaml ├── exploit.py └── app/ └── exploit.desktop Cómo ejecutar y compilar 1. Instalar el SDK de Flatpak si es necesario: flatpak...

F5-BIG-IP-POC

F5-BIG-IP POC Written in Go, a collection of POCs for CVE-2020-5902, CVE-2021-22986, CVE-2022-1388. Other F5 POCs will be added later. author:160team.west9B For use only by security researchers with authorization. Comply with cybersecurity laws. Any consequences are your own responsibility, and t...

WinRAR-Code-Execution-Vulnerability-CVE-2023-38831

Entendiendo la Vulnerabilidad de Ejecución de Código en WinRAR CVE-2023-38831 La descripción general: Part-1...

CVE-2019-0230-PoC

CVE-2019-0230 CVE-2019-0230 Exploit Este es el Exploit de CVE-2019-0230 : uso python3 cve-2019-230.py ejemplo: root@kitploit: python3 cve-2019-0230-poc.py pentest.com whoami Testing pentest.com! Command being passed for RCE: whoami 2020/10/22/...

CVE-2023-51385_poc-test

CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH 9.6 vulnerabilidad de inyección de comandos poc Chino 1.vim /.ssh/config o edita C:/Users/username/.ssh/config en sistema Windows root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 2. git clone...

CVE-2023-30547

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...

Mass-CVE-2025-3248

Langflow CVE-2025-3248 Exploit Tool Resumen Esta herramienta explota la vulnerabilidad crítica de Ejecución Remota de Código RCE CVE-2025-3248 encontrada en versiones de Langflow anteriores a la 1.3.0. La vulnerabilidad existe en el endpoint /api/v1/validate/code que ejecuta incorrectamente códig...

pinky

Subir una webshell es casi siempre el siguiente paso después de explotar una vulnerabilidad web, pero servicios como Cloudflare y la nueva generación de firewalls hacen un muy buen trabajo impidiendo que los atacantes ejecuten comandos en el objetivo a través de HTTP o HTTPS. Por otro lado, el...

CVE-2024-29943-but-with-wasm

CVE-2024-29943, but with wasm An end-to-end exploit chain for CVE-2024-29943 that achieves arbitrary native code execution by smuggling shellcode into SpiderMonkey's WebAssembly JIT code page as f64.const immediates — no ROP, no VirtualProtect, no external toolchain. Verified working against the...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework...

CVE-2021-41773

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...

CVE-2025-3052

🐞 CVE-2025-3052: IhisiParamBuffer Memory Corruption This repository centralizes research material related to CVE-2025-3052, a memory corruption vulnerability in a UEFI module signed with Microsoft's third-party certificate that allows an attacker to corrupt security-critical firmware structures,...

CVE-2022-22965-Spring4Shell

Spring4Shell Spring4Shell CVE-2022-22965 Prueba de Concepto con un servidor Tomcat vulnerable y una aplicación spring4shell vulnerable. Detalles sobre esta vulnerabilidad https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...

CVE-2021-27850_POC

CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...

teamcity-CVE-2026-63077-pcap

teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...

CVE-2026-18718

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

CVE-2026-39987

CVE-2026-39987 Exploit POC Overview This repository contains a Proof-of-Concept POC script for CVE-2026-39987, a pre-authentication Remote Code Execution RCE vulnerability in Marimo. The exploit leverages a WebSocket endpoint to execute arbitrary commands on the target system. Vulnerability Detai...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 es una vulnerabilidad grave que afecta a los dispositivos de almacenamiento conectado en red NAS de QNAP. Esta vulnerabilidad se origina en el uso inseguro de la función strcpy en la función NoSupportACL del script share.cgi del sistema operativo QTS, lo que...